rpms/newsx/devel newsx-stack.patch,NONE,1.1 newsx.spec,1.7,1.8

[Dominik Mierzejewski (rathann)]

Author: rathann

Update of /cvs/pkgs/rpms/newsx/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv9623

Modified Files:
	newsx.spec 
Added Files:
	newsx-stack.patch 
Log Message:
* Sat Jul 12 2008 Dominik Mierzejewski <rpm at greysector.net> 1.6-9
- fixed stack buffer overflow in getarticle.c (#454483)
- rebuilt against INN shared libraries (#454897)


newsx-stack.patch:

--- NEW FILE newsx-stack.patch ---
diff -up newsx-1.6/src/getarticle.c.stack newsx-1.6/src/getarticle.c
--- newsx-1.6/src/getarticle.c.stack	2003-01-21 10:47:25.000000000 +0100
+++ newsx-1.6/src/getarticle.c	2008-07-12 23:02:35.000000000 +0200
@@ -143,12 +143,12 @@ read_article(long where,char *group)
     long len;
     long bytecount = 0L; /* BUG: */
 
-    line=linebuf;
-    line[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
+    linebuf[MAX_HEADER_SIZE] = '\0'; /* better safe than sorry */
     path_line[0] = '\0';
 
     /* fetch the article, header and body */
     for (;;) {
+	line=linebuf;
 	if (!get_server_msg(line, MAX_HEADER_SIZE)) {
 	    /* timeout: simply give up */
 	    return 0;


Index: newsx.spec
===================================================================
RCS file: /cvs/pkgs/rpms/newsx/devel/newsx.spec,v
retrieving revision 1.7
retrieving revision 1.8
diff -u -r1.7 -r1.8
--- newsx.spec	19 Feb 2008 20:47:54 -0000	1.7
+++ newsx.spec	12 Jul 2008 21:11:47 -0000	1.8
@@ -1,6 +1,6 @@
 Name:		newsx
 Version:	1.6
-Release:	8%{?dist}
+Release:	9%{?dist}
 License:	GPLv2+
 Summary:	NNTP news exchange utility
 Summary(pl):	Narzędzie do wymiany newsów po NNTP
@@ -8,6 +8,7 @@
 Source0:	ftp://ftp.kvaleberg.com/pub/%{name}-%{version}.tar.gz
 # Source0-md5:	ad9c76c53d5c7d21d86bec805fe8cd34
 Patch0:		%{name}-make.patch
+Patch1:		%{name}-stack.patch
 BuildRequires:	inn-devel
 BuildRequires:	automake
 BuildRequires:	autoconf
@@ -27,6 +28,7 @@
 %prep
 %setup -q
 %patch0 -p1
+%patch1 -p1 -b .stack
 
 %build
 autoreconf -f -i
@@ -57,6 +59,10 @@
 %{_mandir}/man[158]/*
 
 %changelog
+* Sat Jul 12 2008 Dominik Mierzejewski <rpm at greysector.net> 1.6-9
+- fixed stack buffer overflow in getarticle.c (#454483)
+- rebuilt against INN shared libraries (#454897)
+
 * Tue Feb 19 2008 Fedora Release Engineering <rel-eng at fedoraproject.org> - 1.6-8
 - Autorebuild for GCC 4.3